Date
1 - 2 of 2
Rolling out odlparent-8.1.0
|
Robert Varga
Hello everyone,
as I mentioned in November, I would like to roll out odlparent-8.1.0 to replace the original MRI odlparent-8.0.x stream. The reason for this is karaf-4.3.0 and its support for two things: OSGi Release 7 -------------- This is a major upgrade to Release 6 shipped in the 4.2.x series. The details are summed up nicely here: https://blog.osgi.org/2018/09/osgi-r7-highlights-blog-series.html The most important items are: - JAX-RS support (finally) - HTTP whiteboard update (to support JAX-RS) - Declarative Service updates (constructor injection) - Bundle Annotations (allowing to ditch a lot of maven-bundle-plugin overrides) Jackson-2.11 ------------ This is a relatively minor upgrade, summed up here: https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.11 The absolutely most important is support for safe Polymorphic deserialization, which should put a stop to all those CVEs around serialization gadgets we have seen in the last two or three years. With that, the MRI projects are spinning releases integrating this, I expect all of it to be ready this evening CET. The preliminary patches to adopt these are living over here: https://git.opendaylight.org/gerrit/q/topic:odlparent-8.1 . Preliminary testing did not find anything broken, and if that gets confirmed through a multipatch-build, I will ask for supercommitter rights and merge it up either tomorrow (Tuesday) or on Wednesday. If anybody has objections, please holler now :) Thanks, Robert |
|
|
|
Robert Varga
On 25/01/2021 16:16, Robert Varga wrote:
Hello everyone,[snip] The patches are out there. Preliminary testing did not find anything broken, and if that getsmutlitpatch-build seems to fail in lispflowmapping, not sure why. I have tried the complete series locally and it works like a charm. I'd say just merge it :) Guillaume, can we put this up for a quick vote on the TSC call today? Thanks, Robert |
|
|